NVD

Id
80394  
Name
CVE-2002-1441  
Description
Multiple buffer overflows in Tomahawk SteelArrow before 4.5 allow remote attackers to execute arbitrary code via (1) the Steelarrow Service (Steelarrow.exe) using a long UserIdent Cookie header, (2) DLLHOST.EXE (Steelarrow.dll) via a request for a long .aro file, or (3) DLLHOST.EXE via a Chunked Transfer-Encoding request.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2003-04-11  
Modified Date
2008-09-05  
Seq
2002-1441  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
400935 80394 CVE-2002-1441 20020819 Multiple Buffer Overflow vulnerabilities in SteelArrow (#NISR19082002B)  View
400936 80394 CVE-2002-1441 20020819 Multiple Buffer Overflow vulnerabilities in SteelArrow (#NISR19082002B)  View
400937 80394 CVE-2002-1441 steelarrow-userident-bo(9888)  View
400938 80394 CVE-2002-1441 steelarrow-long-aro-bo(9889)  View
400939 80394 CVE-2002-1441 steelarrow-chunked-aro-bo(9890)  View
400940 80394 CVE-2002-1441 http://www.nextgenss.com/advisories/steel-arrow-bo.txt  View
400941 80394 CVE-2002-1441 http://www.nextgenss.com/vna/tom-saro.txt  View
400942 80394 CVE-2002-1441 4860  View
400943 80394 CVE-2002-1441 5494  View
400944 80394 CVE-2002-1441 5495  View
400945 80394 CVE-2002-1441 5496  View
400946 80394 CVE-2002-1441 http://www.steelarrow.com/  View

Related JVN